$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft File: A7133A09AC078B101CB7980FE646810280C0D64F.mft (raw, json) Hash identifier: 6to+yyTL9AwplN5rNFR9Vmj9Qn07WZwEgmK21HPkkE4= Subject key identifier: F4:54:A0:ED:8A:F4:AB:DF:F0:0C:33:6B:DF:A3:37:6C:92:91:C8:A1 Authority key identifier: A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F Certificate issuer: /CN=A7133A09AC078B101CB7980FE646810280C0D64F Certificate serial: 3F2485BE606954967246B8BEA7417131319C9F28 Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft Manifest number: 49 Signing time: Thu 11 Jun 2026 07:58:28 +0000 Manifest this update: Thu 11 Jun 2026 07:53:28 +0000 Manifest next update: Fri 12 Jun 2026 09:48:28 +0000 Files and hashes: 1: 3131382e3234322e31362e302f32322d3232203d3e2034383132.roa (hash: Wg6c56nIiryoYb5Qqfo2U52K9I6Dt+EF0h4NcPIMpRg=) 2: A7133A09AC078B101CB7980FE646810280C0D64F.crl (hash: jfjNRxHh+VoZwAuQEIWdWxjEKJjoN4m0wxOuHzpV+VE=) 3: 3131382e3234322e302e302f32322d3232203d3e2034383132.roa (hash: 58I4ydCCcF9hQm4ALM8HdXPHeUsscGP0Ad1DVSViNOs=) 4: 3131382e3234322e32342e302f32322d3232203d3e2034383132.roa (hash: NcYkM98RLbkSlZKIJVkf0b8tgMhZh0eBBgVWrZHmpIE=) 5: 3131382e3234322e34302e302f32342d3234203d3e2034383132.roa (hash: YuFq6zn2fxeE5ra6cdH7TfbmzrsmrMPSofOx9YtBqUQ=) 6: 3131382e3234322e33322e302f32322d3232203d3e2034383132.roa (hash: eqKYssRjmbT+n2crq/yxbZNVr33UQZ6vHSKYThAYbGw=) 7: 3131382e3234322e302e302f31362d3136203d3e2030.roa (hash: mUk74oXYFU6Ae6TtZNwjm0VOpRcUFRFOOIDC/sj+JZU=) Validation: OK Signature path: rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 12 Jun 2026 09:48:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:24:85:be:60:69:54:96:72:46:b8:be:a7:41:71:31:31:9c:9f:28 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A7133A09AC078B101CB7980FE646810280C0D64F Validity Not Before: Jun 11 07:53:28 2026 GMT Not After : Jun 12 09:48:28 2026 GMT Subject: CN=F454A0ED8AF4ABDFF00C336BDFA3376C9291C8A1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:24:0d:29:1e:4b:55:03:c0:cb:75:df:3e:e1: cf:b4:be:65:de:6a:ab:44:13:4e:0c:59:8f:4f:6f: 97:62:65:c5:72:da:a8:ee:97:91:35:25:fd:e3:b6: d6:6a:25:7d:46:22:35:1c:c2:7b:00:05:d0:b3:44: 48:70:da:c7:8e:7d:48:87:72:de:1d:6c:7d:83:56: 57:cc:09:43:70:28:02:07:70:05:fb:1f:98:bc:c3: 8d:04:54:23:f2:9b:be:90:94:8c:3b:e1:0f:ac:99: 81:39:41:ea:f1:f7:5d:da:1b:76:63:3b:5b:66:d1: d3:b3:b1:ae:b2:f1:c1:d3:19:79:ba:d6:e2:55:f4: 28:02:7e:ca:d0:d9:4e:c3:72:5c:1e:65:36:c2:97: 94:44:07:c6:5b:e8:f5:3a:da:ef:c6:e4:a2:ee:57: 93:aa:e7:f7:b1:28:39:c3:f8:28:0c:fe:f4:29:bf: 55:3f:4d:9e:c3:ca:28:22:a8:9c:b9:22:d6:aa:6f: 33:43:d2:14:7c:e5:c8:2a:e1:0f:fd:74:93:30:84: 40:12:dc:1c:bb:7a:8f:b3:75:0c:37:d8:37:f4:1f: 35:ab:21:7b:74:a2:ef:ae:48:30:cd:4a:f5:7b:c9: b7:70:47:59:2c:04:fd:65:54:9d:0b:63:b8:52:82: 74:2b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: F4:54:A0:ED:8A:F4:AB:DF:F0:0C:33:6B:DF:A3:37:6C:92:91:C8:A1 X509v3 Authority Key Identifier: keyid:A7:13:3A:09:AC:07:8B:10:1C:B7:98:0F:E6:46:81:02:80:C0:D6:4F X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.crl Authority Information Access: CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A7133A09AC078B101CB7980FE646810280C0D64F.cer Subject Information Access: Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1098988489464086530/0/A7133A09AC078B101CB7980FE646810280C0D64F.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption a8:4c:22:83:5b:28:6d:db:a8:e2:bc:08:6c:0d:09:90:34:8e: 06:72:45:2d:ef:80:36:df:70:88:00:01:ae:e0:b8:4a:b4:59: 54:88:1c:20:5e:9f:6d:f0:4e:c0:60:41:3e:94:0e:f5:2c:3d: dd:b6:4b:47:e3:6b:61:9f:96:28:4e:90:9b:6e:a2:db:d1:7f: 75:b2:dd:25:31:e8:78:34:12:28:92:a8:a3:69:c1:c6:e5:a2: 9a:79:a1:c1:7a:a1:db:d0:a0:2b:f7:23:0f:7c:95:00:55:4b: 10:91:81:93:8a:b3:97:67:c0:a3:49:c9:e1:77:76:54:f5:cf: d4:70:42:fd:c5:df:f9:23:0b:65:26:8b:af:f6:9b:47:cf:3c: b8:83:9c:6c:74:ee:53:92:59:31:11:b1:9d:56:0e:42:af:7f: c2:f4:a2:b1:5a:bf:75:26:b2:79:d5:f3:16:ef:ce:f3:03:0c: a7:a2:36:a0:e2:1e:a9:01:47:dc:d0:6d:b8:3a:1a:1b:78:06: c2:75:66:5e:e6:72:02:8c:eb:5e:0e:55:ba:5c:7d:0c:06:91: 47:77:01:9f:8c:02:45:15:c4:ba:34:ef:93:0e:98:02:ef:7a: ec:99:9f:8d:d1:49:9a:d3:2b:09:64:a2:3d:c1:93:ed:d3:f7: 3d:5f:3a:bf -----BEGIN CERTIFICATE----- MIIFEzCCA/ugAwIBAgIUPySFvmBpVJZyRri+p0FxMTGcnygwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4 MEMwRDY0RjAeFw0yNjA2MTEwNzUzMjhaFw0yNjA2MTIwOTQ4MjhaMDMxMTAvBgNV BAMTKEY0NTRBMEVEOEFGNEFCREZGMDBDMzM2QkRGQTMzNzZDOTI5MUM4QTEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpJA0pHktVA8DLdd8+4c+0vmXe aqtEE04MWY9Pb5diZcVy2qjul5E1Jf3jttZqJX1GIjUcwnsABdCzREhw2seOfUiH ct4dbH2DVlfMCUNwKAIHcAX7H5i8w40EVCPym76QlIw74Q+smYE5Qerx913aG3Zj O1tm0dOzsa6y8cHTGXm61uJV9CgCfsrQ2U7DclweZTbCl5REB8Zb6PU62u/G5KLu V5Oq5/exKDnD+CgM/vQpv1U/TZ7DyigiqJy5ItaqbzND0hR85cgq4Q/9dJMwhEAS 3By7eo+zdQw32Df0HzWrIXt0ou+uSDDNSvV7ybdwR1ksBP1lVJ0LY7hSgnQrAgMB AAGjggIdMIICGTAdBgNVHQ4EFgQU9FSg7Yr0q9/wDDNr36M3bJKRyKEwHwYDVR0j BBgwFoAUpxM6CawHixAct5gP5kaBAoDA1k8wDgYDVR0PAQH/BAQDAgeAMHMGA1Ud HwRsMGowaKBmoGSGYnJzeW5jOi8vcnBraS1ycHMuY25uaWMuY24vcmVwby9BMTA5 ODk4ODQ4OTQ2NDA4NjUzMC8wL0E3MTMzQTA5QUMwNzhCMTAxQ0I3OTgwRkU2NDY4 MTAyODBDMEQ2NEYuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5 bmM6Ly9ycGtpLXJwcy5jbm5pYy5jbi9yZXBvL0ExMDU1MzkwNzc1MDkwNjc1NzE1 LzEvQTcxMzNBMDlBQzA3OEIxMDFDQjc5ODBGRTY0NjgxMDI4MEMwRDY0Ri5jZXIw fgYIKwYBBQUHAQsEcjBwMG4GCCsGAQUFBzALhmJyc3luYzovL3Jwa2ktcnBzLmNu bmljLmNuL3JlcG8vQTEwOTg5ODg0ODk0NjQwODY1MzAvMC9BNzEzM0EwOUFDMDc4 QjEwMUNCNzk4MEZFNjQ2ODEwMjgwQzBENjRGLm1mdDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAwFQYI KwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqEwig1sobduo 4rwIbA0JkDSOBnJFLe+ANt9wiAABruC4SrRZVIgcIF6fbfBOwGBBPpQO9Sw93bZL R+NrYZ+WKE6Qm26i29F/dbLdJTHoeDQSKJKoo2nBxuWimnmhwXqh29CgK/cjD3yV AFVLEJGBk4qzl2fAo0nJ4Xd2VPXP1HBC/cXf+SMLZSaLr/abR888uIOcbHTuU5JZ MRGxnVYOQq9/wvSisVq/dSayedXzFu/O8wMMp6I2oOIeqQFH3NBtuDoaG3gGwnVm XuZyAozrXg5Vulx9DAaRR3cBn4wCRRXEujTvkw6YAu967JmfjdFJmtMrCWSiPcGT 7dP3PV86vw== -----END CERTIFICATE-----Generated at Thu Jun 11 22:41:23 2026 by rpki-client